Retrieve NameID

Peter Schober peter.schober at univie.ac.at
Fri Jun 29 10:25:27 EDT 2018


* George Glessner <gglessner at serviceexpress.com> [2018-06-29 16:18]:
> In my attribute-map.xml there is 
> 
>     <Attribute name="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent" id="persistent-id">
>         <AttributeDecoder xsi:type="NameIDAttributeDecoder" formatter="$NameQualifier!$SPNameQualifier!$Name" defaultQualifiers="true"/>
>     </Attribute>
> 
> Does this not build a HTTP header?

No. Not unless you force the software to do so:
By default attributes are exposed as environment variables, not as
HTTP Request Headers, at least on Apache httpd.
The documentation explains why. (TL;DR: Because security.)

> Request.servervariables("HTTP_persistent-id")

What kind of API is that?

Also check whether underscores and dashes are not molested/normalized
on the conversion to HTTP Request Headers in some way, so the name may
not be exactly that.

As Scott already told you in another thread recently:

* Cantor, Scott <cantor.2 at osu.edu> [2018-06-28 22:06]:
> On IIS the safeHeaderNames option will collapse the punctuation in
> the header names, the wiki discusses that. Don't know that that's
> your issue, but it's possible.
> 
> Dump your headers with a loop and you'll know what's there or not.

-peter


More information about the users mailing list